It appears you have not yet registered with our community. To register please click here...

 
Go Back [M] > For Sale - LAN Parties - Other > Off-Topic Hangout
How easy hacking WLAN is How easy hacking WLAN is
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read


How easy hacking WLAN is
Closed Thread
 
Thread Tools
Old 11th November 2006, 14:09   #11
SuAside
 
Posts: n/a
Default

i've gone on a wardrive through a few cityblocks of Gent a good while back, with some schoolbuddies for educational purposes (we were all studying IT with a specialisation in Networks at the time) and you simply wouldn't believe how many wireless hotspots are totally unsecured or take less than 5 minutes to break.

on a sidenote however, i'd also like to point out that a great many ADSL connections without wireless are quite easy to abuse as well, due to bad configuration of the routers. do a trace, locate the router, retrieve any information you can (pref model + brand), look up default passwords on the web (like admin/admin, but also some brandspecific ones), access the router (if it can be accessed from the outside, which it often is) and retrieve the connection information from the router.
once you've done that, simply put that info in another DSL router that you want to use (preferably not at home obviously, since there is always a slim chance of a company getting wise & tracing you) & leech the traffic from the stolen account. one would think an adsl account is bound to a particular telephone line, but it usually isn't.

i, of course, do NOT advice nor support this course of action, so do not try this at home, but i do know for a fact this works.

(i've left out some harmful information, but you get the idea)
 
Old 11th November 2006, 15:08   #12
Madshrimp
 
jmke's Avatar
 
Join Date: May 2002
Location: 7090/Belgium
Posts: 78,700
jmke has disabled reputation
Default

default router config of those bought in shops don't allow remote access
__________________
jmke is offline  
Old 12th November 2006, 16:19   #13
SuAside
 
Posts: n/a
Default

Quote:
Originally posted by jmke
default router config of those bought in shops don't allow remote access
most of respectable brands don't indeed. however there is a great deal of trash out there that does (and that trash is usually bought by people who have no idea about security and hence don't know how to disable it or change passwords).

take my word for it, dude. i've seen it done by a buddy of mine. found & cracked 3 in half an hour.
 
Old 12th November 2006, 21:05   #14
[M] Reviewer
 
Join Date: Jun 2002
Posts: 4,998
piotke Freshly Registered
Default

apple ibook + kissmac

any WEP / WPA network cracked in <5 minutes
__________________
.
piotke is offline  
Old 13th November 2006, 06:38   #15
Kougar
 
Posts: n/a
Default

Quote:
Originally posted by jmke


I heartily disagree; getting 300-400kb/s over your local network is too damn slow to do anything useful with.

UTP Cat5e is still the way to go.
At those kinds of speeds I would agree with you!

The Homeplug standard is rated for 200mb/s though. No range or drop issues personally, and the protocol specs are only going up.
 
Old 13th November 2006, 06:53   #16
Madshrimp
 
jmke's Avatar
 
Join Date: May 2002
Location: 7090/Belgium
Posts: 78,700
jmke has disabled reputation
Default

they may be rated that high, but that best case scenario in a perfect setup in real world these home plugs are ridiculously overpriced for the poor quality you get
__________________
jmke is offline  
Old 19th November 2006, 18:49   #17
OCTB Crew
 
jort's Avatar
 
Join Date: Jun 2004
Location: mechelen(belgium)
Posts: 2,037
jort Freshly Registered
Default

My wireless gear;

proxim Orinoco(atheros) 802 a/b/g Gold combo card with external antenna + 6dbi



Perfect wardriving gear lol
__________________
watercooling, chilled water,direct phase change, cascade, custom modding
jort is offline  
Old 25th November 2006, 11:36   #18
[M] Reviewer
 
Join Date: May 2002
Posts: 260
Jay-Jay Freshly Registered
Default

A lot of blablabla ranting...

The average pc that is connected to inet is even more vulnerable then worrying about WEP vulnerabilities. Just a load of crap to scare people with no awareness of security whatsoever. Seems to be a new trend nowadays.

I know enough about security, and certainly about wifi-security to confirm you that an average person (about 99% of the world) will not succees in cracking your WEP encryption. And the few people that might actually be able to do so would only do it for the thrill. If they even bother at all. Once you know the technique there is no thrill in it to perform it over and over. And if they need a quick connection they might as well take one of the other 50% of the completely unsecured connections.

Up until now, I've had dozens of conversations with people claiming that only fools use WEP and that WEP is so unreliable. Well duh, it has some serious flaws.(you should not tell me, I've been studying this stuff for years now) But then the conversation continues and I ask them HOW to crack WEP, and until now 3 people actally succeeded to explain a succesful technique to me. The rest just heard or read about the flaws, and spread the word without actually knowing what they are talking about. Promiscuous what? Atheros or Prism chipset? kismet? Linux?

And lolzors on the youtube film. "They bought some readily available software". Who would actually be so stupid to buy software when kismet, airodump and aircrack are free?

I hate it when people try to act smart on stuff they only vaguely heard of

Btw Piotke: I partly have to disagree on your statement. WEP is indeed hackable in a couple of minutes, but only when there is someone actually connected to the network that you can deauth, or when someone is authenticating on the moment that you are already sniffing. In all other cases I would like to see you get access in anything less then a couple of days of collecting IV packets.
And for WPA: I fully agree that WPA CAN be easily cracked, but only when using WPA-PSK with a very simple passphrase. (so not a flaw in WPA but user stupidity) I would like to see you do this in 5 minutes with for example a randomly-generated passphrase of 20 characters. Or do you just happen to have the full Rainbow-table set ready? Or lets make it challenging. WPA-TLS with a RADIUS implementation behind it? You wouldn't even have enough time to type in your airocrack command before the keys dynamically change again.

I am not saying that you do not know what you are saying, and I am fully aware that 95% of the wireless networks are indeed hackable within 5 minutes, but I just disagree on your statement that ANY WEP or WPA protected network is hackable in a short amount of time.


Oh yeah, just for closure: WEP actually stands for WIRED equivalent privacy. If you are really concerned about this, just think about the fact that a standard wired network is 10 times less secure than a wireless network with WEP. All you need in a wired environment is a wall plug or a wire-cutter...

Edited 4 times due to sleepy head and terrible grammatical mistakes...

Last edited by Jay-Jay : 25th November 2006 at 11:43.
Jay-Jay is offline  
Old 29th November 2006, 17:47   #19
[M] Reviewer
 
geoffrey's Avatar
 
Join Date: Nov 2004
Posts: 4,120
geoffrey Fully Registeredgeoffrey Fully Registeredgeoffrey Fully Registeredgeoffrey Fully Registeredgeoffrey Fully Registeredgeoffrey Fully Registeredgeoffrey Fully Registeredgeoffrey Fully Registered
Default

Today's situation: 2 pc's in LAN, cross cable connected. ADSL connection with USB modem.

Tomorrow's situation: same 2 pc's in lan wich must have high bandwidth + laptop wich has enough with low bandwith (and has lot's of personal files that I don't want my neighbours to have). I want to keep the ADSL connection.

Best thing to solve this regarding this thread: ADSL router with the 2 pc's connected with a straight cable + the laptop connected wireless (but with lots of security even if it does slow down your connection).
Does this thing exist? Got better idea's?
geoffrey is offline  
Old 30th November 2006, 12:05   #20
[M] Reviewer
 
Join Date: May 2002
Posts: 260
Jay-Jay Freshly Registered
Default

Is indeed the easiest solution. And with a decent WPA passphrase you really shouldn't have to bother about security. Heck, even with WEP, but if the equipment supports better security and a bit of bandwith reduction isn't an issue, go for the WPA.
Jay-Jay is offline  
Closed Thread


Similar Threads
Thread Thread Starter Forum Replies Last Post
MSI P55-GD80 - Easy Overclocking jmke WebNews 0 24th March 2010 11:16
MacBook Air First To Be Compromised In Hacking Contest jmke WebNews 0 28th March 2008 13:58
X-Micro WLAN 11g Combo Finder Adapter Sidney WebNews 0 10th April 2006 05:19
Wlan dependant on GFX core speed? WTF? djivesp Hardware/Software Problems, Bugs 1 7th February 2006 13:24
A4Tech Easy Go AK-5 Review Sidney WebNews 0 31st December 2004 05:26
WLAN 11g Router + PCI Card Sidney WebNews 0 6th November 2004 02:41

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


All times are GMT +1. The time now is 08:56.


Powered by vBulletin® - Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO